本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# Amazon SQS API 許可：動作和資源參考
<a name="sqs-api-permissions-reference"></a>

當您設定 [存取控制](security_iam_service-with-iam.md#access-control) 並撰寫可連接到 IAM 身分的許可政策時，可以使用以下表格做為參考。資料表清單每個 Amazon Simple Queue Service 動作、您可以授予執行動作許可的對應動作，以及您可以授予許可 AWS 的資源。

在政策的 `Action` 欄位中指定動作，然後在政策的 `Resource` 欄位中指定資源值。若要指定動作，請使用 `sqs:` 字首後接 動作名稱 (例如，`sqs:CreateQueue`)。

目前，Amazon SQS 支援 [IAM 中提供的全域條件內容金鑰](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。

使用捲軸查看資料表的其餘部分。


**Amazon Simple Queue Service API 和動作所需的許可**  
<a name="sqs-api-and-required-permissions-for-actions-table"></a>

- ** `[AddPermission](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_AddPermission.html)` **
  - **所需的許可:** sqs:AddPermission
  - **資源:** `arn:aws:sqs:{{region}}:{{account_id}}:{{queue_name}}`

- **`[CancelMessageMoveTask](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CancelMessageMoveTask.html)`**
  - **所需的許可:**
    - sqs:CancelMessageMoveTask
    - sqs:ReceiveMessage
    - sqs:DeleteMessage
    - sqs:GetQueueAttributes
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{dlq\_queue\_name}}

- ** `[ChangeMessageVisibility](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibility.html)` **
  - **所需的許可:** sqs:ChangeMessageVisibility
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ChangeMessageVisibilityBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ChangeMessageVisibilityBatch.html)` **

- ** `[CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html)` **
  - **所需的許可:** sqs:CreateQueue
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[DeleteMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessage.html)` **
  - **所需的許可:** sqs:DeleteMessage
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[DeleteMessageBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteMessageBatch.html)` **

- ** `[DeleteQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_DeleteQueue.html)` **
  - **所需的許可:** sqs:DeleteQueue
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[GetQueueAttributes](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueAttributes.html)` **
  - **所需的許可:** sqs:GetQueueAttributes
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[GetQueueUrl](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_GetQueueUrl.html)` **
  - **所需的許可:** sqs:GetQueueUrl
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ListDeadLetterSourceQueues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListDeadLetterSourceQueues.html)` **
  - **所需的許可:** sqs:ListDeadLetterSourceQueues
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- **`[ListMessageMoveTasks](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListMessageMoveTasks.html)`**
  - **所需的許可:**
    - sqs:ListMessageMoveTasks
    - sqs:GetQueueAttributes
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{dlq\_queue\_name}}

- ** `[ListQueues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueues.html)` **
  - **所需的許可:** sqs:ListQueues
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:\*

- ** `[ListQueueTags](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ListQueueTags.html)` **
  - **所需的許可:** sqs:ListQueueTags
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[PurgeQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_PurgeQueue.html)` **
  - **所需的許可:** sqs:PurgeQueue
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[ReceiveMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_ReceiveMessage.html)` **
  - **所需的許可:** sqs:ReceiveMessage
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[RemovePermission](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_RemovePermission.html)` **
  - **所需的許可:** sqs:RemovePermission
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[SendMessage](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html)` **
  - **所需的許可:** sqs:SendMessage
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[SendMessageBatch](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessageBatch.html)` **

- ** `[SetQueueAttributes](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SetQueueAttributes.html)` **
  - **所需的許可:** sqs:SetQueueAttributes
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- **`[StartMessageMoveTask](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_StartMessageMoveTask.html)`**
  - **所需的許可:** sqs:StartMessageMoveTask / **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{source\_queue\_name}}
  - **所需的許可:** sqs:ReceiveMessage
  - **所需的許可:** sqs:DeleteMessage
  - **所需的許可:** sqs:GetQueueAttributes
  - **所需的許可:** sqs:SendMessage / **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{source\_queue\_name}}

- ** `[TagQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_TagQueue.html)` **
  - **所需的許可:** sqs:TagQueue
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}

- ** `[UntagQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_UntagQueue.html)` **
  - **所需的許可:** sqs:UntagQueue
  - **資源:** arn:aws:sqs:{{region}}:{{account\_id}}:{{queue\_name}}